EP1317115A3 - A firewall for filtering tunneled data packets - Google Patents
A firewall for filtering tunneled data packets Download PDFInfo
- Publication number
- EP1317115A3 EP1317115A3 EP02396174A EP02396174A EP1317115A3 EP 1317115 A3 EP1317115 A3 EP 1317115A3 EP 02396174 A EP02396174 A EP 02396174A EP 02396174 A EP02396174 A EP 02396174A EP 1317115 A3 EP1317115 A3 EP 1317115A3
- Authority
- EP
- European Patent Office
- Prior art keywords
- data packet
- filtering
- rule
- firewall
- data packets
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
- H04L63/0227—Filtering policies
- H04L63/0236—Filtering by address, protocol, port number or service, e.g. IP-address or URL
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
- H04L63/0227—Filtering policies
- H04L63/0254—Stateful filtering
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
- H04L63/029—Firewall traversal, e.g. tunnelling or, creating pinholes
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W80/00—Wireless network protocols or protocol adaptations to wireless operation
- H04W80/04—Network layer protocols, e.g. mobile IP [Internet Protocol]
Abstract
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
FI20012338A FI20012338A0 (en) | 2001-11-29 | 2001-11-29 | Firewall for filtering tunneled data packets |
FI20012338 | 2001-11-29 |
Publications (3)
Publication Number | Publication Date |
---|---|
EP1317115A2 EP1317115A2 (en) | 2003-06-04 |
EP1317115A3 true EP1317115A3 (en) | 2007-04-04 |
EP1317115B1 EP1317115B1 (en) | 2008-04-02 |
Family
ID=8562368
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
EP02396174A Expired - Fee Related EP1317115B1 (en) | 2001-11-29 | 2002-11-21 | A firewall for filtering tunneled data packets |
Country Status (4)
Country | Link |
---|---|
US (1) | US7721084B2 (en) |
EP (1) | EP1317115B1 (en) |
DE (1) | DE60225892T2 (en) |
FI (1) | FI20012338A0 (en) |
Families Citing this family (62)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US7711819B2 (en) * | 2001-10-31 | 2010-05-04 | Fujitsu Limited | Load balancer |
FI20012338A0 (en) * | 2001-11-29 | 2001-11-29 | Stonesoft Corp | Firewall for filtering tunneled data packets |
KR100510669B1 (en) * | 2002-12-31 | 2005-08-31 | 엘지전자 주식회사 | Method of Establishing a Destination Call in a Packet Radio Service Network and System for the same |
US20040125770A1 (en) * | 2002-12-31 | 2004-07-01 | Pitt Randall Evans | Method and apparatus for transferring state information between communication networks |
MY141160A (en) * | 2003-01-13 | 2010-03-31 | Multimedia Glory Sdn Bhd | System and method of preventing the transmission of known and unknown electronic content to and from servers or workstations connected to a common network |
US20050050060A1 (en) * | 2003-08-27 | 2005-03-03 | Gerard Damm | Data structure for range-specified algorithms |
US9614772B1 (en) * | 2003-10-20 | 2017-04-04 | F5 Networks, Inc. | System and method for directing network traffic in tunneling applications |
US7424293B2 (en) | 2003-12-02 | 2008-09-09 | Telecommunication Systems, Inc. | User plane location based service using message tunneling to support roaming |
US7260186B2 (en) | 2004-03-23 | 2007-08-21 | Telecommunication Systems, Inc. | Solutions for voice over internet protocol (VoIP) 911 location services |
EP1575238A1 (en) * | 2004-03-08 | 2005-09-14 | Nokia Corporation | IP mobility in mobile telecommunications system |
US20050268331A1 (en) * | 2004-05-25 | 2005-12-01 | Franck Le | Extension to the firewall configuration protocols and features |
US7865944B1 (en) * | 2004-09-10 | 2011-01-04 | Juniper Networks, Inc. | Intercepting GPRS data |
US7990967B2 (en) | 2005-01-06 | 2011-08-02 | Rockwell Automation Technologies, Inc. | Firewall method and apparatus for industrial systems |
CN100542171C (en) * | 2005-03-15 | 2009-09-16 | 华为技术有限公司 | A kind of moving IPv 6 data passes through the method for status firewall |
US7353034B2 (en) | 2005-04-04 | 2008-04-01 | X One, Inc. | Location sharing and tracking using mobile phones or other wireless devices |
US20060253908A1 (en) | 2005-05-03 | 2006-11-09 | Tzu-Jian Yang | Stateful stack inspection anti-virus and anti-intrusion firewall system |
US7424000B2 (en) * | 2005-05-26 | 2008-09-09 | Symbol Technologies, Inc. | Time slot reservation scheme in wireless meshed networks |
US8660573B2 (en) | 2005-07-19 | 2014-02-25 | Telecommunications Systems, Inc. | Location service requests throttling |
US8533308B1 (en) | 2005-08-12 | 2013-09-10 | F5 Networks, Inc. | Network traffic management through protocol-configurable transaction processing |
US9282451B2 (en) | 2005-09-26 | 2016-03-08 | Telecommunication Systems, Inc. | Automatic location identification (ALI) service requests steering, connection sharing and protocol translation |
US8565088B1 (en) | 2006-02-01 | 2013-10-22 | F5 Networks, Inc. | Selectively enabling packet concatenation based on a transaction boundary |
US7561574B2 (en) | 2006-02-23 | 2009-07-14 | Computer Associates Think, Inc. | Method and system for filtering packets within a tunnel |
US7817629B2 (en) * | 2006-05-12 | 2010-10-19 | Agere Systems Inc. | Methods and apparatus for performing network operations on packets of data in response to content of particular user-specified protocol header fields |
US8412207B2 (en) | 2006-12-21 | 2013-04-02 | Core Wireless Licensing S.A.R.L. | Method of providing a mobility service |
US9106606B1 (en) | 2007-02-05 | 2015-08-11 | F5 Networks, Inc. | Method, intermediate device and computer program code for maintaining persistency |
EP1973275A1 (en) * | 2007-03-22 | 2008-09-24 | British Telecommunications Public Limited Company | Data communications method and apparatus |
US20080232359A1 (en) * | 2007-03-23 | 2008-09-25 | Taeho Kim | Fast packet filtering algorithm |
US9270641B1 (en) * | 2007-07-31 | 2016-02-23 | Hewlett Packard Enterprise Development Lp | Methods and systems for using keywords preprocessing, Boyer-Moore analysis, and hybrids thereof, for processing regular expressions in intrusion-prevention systems |
WO2009038726A1 (en) | 2007-09-17 | 2009-03-26 | Telecommunication Systems, Inc. | Emergency 911 data messaging |
EP2071775A1 (en) * | 2007-12-13 | 2009-06-17 | British Telecommunications public limited company | Data access |
US8867485B2 (en) | 2009-05-05 | 2014-10-21 | Telecommunication Systems, Inc. | Multiple location retrieval function (LRF) network having location continuity |
US9008082B2 (en) | 2009-12-07 | 2015-04-14 | Telefonaktiebolaget L M Ericsson (Publ) | Handling data packets received at a routing node |
US20120047572A1 (en) * | 2010-08-17 | 2012-02-23 | Richard Jeremy Duncan | Decapsulation of data packet tunnels to process encapsulated ipv4 or ipv6 packets |
CN103384992B (en) | 2011-06-02 | 2015-11-25 | 华为技术有限公司 | Multiple cpu architecture platform network firewall |
US8798047B1 (en) * | 2011-08-29 | 2014-08-05 | Qlogic, Corporation | Methods and systems for processing network information |
US9137205B2 (en) | 2012-10-22 | 2015-09-15 | Centripetal Networks, Inc. | Methods and systems for protecting a secured network |
US9565213B2 (en) | 2012-10-22 | 2017-02-07 | Centripetal Networks, Inc. | Methods and systems for protecting a secured network |
US9203806B2 (en) | 2013-01-11 | 2015-12-01 | Centripetal Networks, Inc. | Rule swapping in a packet network |
US9124552B2 (en) * | 2013-03-12 | 2015-09-01 | Centripetal Networks, Inc. | Filtering network data transfers |
US9094445B2 (en) | 2013-03-15 | 2015-07-28 | Centripetal Networks, Inc. | Protecting networks from cyber attacks and overloading |
US9380081B1 (en) * | 2013-05-17 | 2016-06-28 | Ca, Inc. | Bidirectional network data replications |
US9288186B2 (en) * | 2013-06-04 | 2016-03-15 | Cisco Technology, Inc. | Network security using encrypted subfields |
US9906497B2 (en) | 2014-10-06 | 2018-02-27 | Cryptzone North America, Inc. | Multi-tunneling virtual network adapter |
US9148408B1 (en) | 2014-10-06 | 2015-09-29 | Cryptzone North America, Inc. | Systems and methods for protecting network devices |
US10110561B2 (en) * | 2014-11-26 | 2018-10-23 | Rockwell Automation Technologies, Inc. | Firewall with application packet classifer |
US9264370B1 (en) | 2015-02-10 | 2016-02-16 | Centripetal Networks, Inc. | Correlating packets in communications networks |
US9866576B2 (en) | 2015-04-17 | 2018-01-09 | Centripetal Networks, Inc. | Rule-based network-threat detection |
US9641485B1 (en) | 2015-06-30 | 2017-05-02 | PacketViper LLC | System and method for out-of-band network firewall |
US9917856B2 (en) | 2015-12-23 | 2018-03-13 | Centripetal Networks, Inc. | Rule-based network-threat detection for encrypted communications |
US20190089595A1 (en) * | 2017-09-18 | 2019-03-21 | Cyber 2.0 (2015) LTD | Automatic security configuration |
US11729144B2 (en) | 2016-01-04 | 2023-08-15 | Centripetal Networks, Llc | Efficient packet capture for cyber threat analysis |
US9628444B1 (en) * | 2016-02-08 | 2017-04-18 | Cryptzone North America, Inc. | Protecting network devices by a firewall |
US10412048B2 (en) | 2016-02-08 | 2019-09-10 | Cryptzone North America, Inc. | Protecting network devices by a firewall |
US9560015B1 (en) * | 2016-04-12 | 2017-01-31 | Cryptzone North America, Inc. | Systems and methods for protecting network devices by a firewall |
US10503899B2 (en) | 2017-07-10 | 2019-12-10 | Centripetal Networks, Inc. | Cyberanalysis workflow acceleration |
US10284526B2 (en) | 2017-07-24 | 2019-05-07 | Centripetal Networks, Inc. | Efficient SSL/TLS proxy |
US11233777B2 (en) | 2017-07-24 | 2022-01-25 | Centripetal Networks, Inc. | Efficient SSL/TLS proxy |
US10333898B1 (en) | 2018-07-09 | 2019-06-25 | Centripetal Networks, Inc. | Methods and systems for efficient network protection |
US11201838B2 (en) * | 2019-09-25 | 2021-12-14 | Intel Corporation | System, apparatus and method for increasing efficiency of link communications |
CN111181984B (en) * | 2019-12-31 | 2022-04-01 | 北京力控华康科技有限公司 | Security protection method, device, system, terminal and storage medium based on environment-friendly 212 protocol |
US11362996B2 (en) | 2020-10-27 | 2022-06-14 | Centripetal Networks, Inc. | Methods and systems for efficient adaptive logging of cyber threat incidents |
US11159546B1 (en) | 2021-04-20 | 2021-10-26 | Centripetal Networks, Inc. | Methods and systems for efficient threat context-aware packet filtering for network protection |
Citations (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5898784A (en) * | 1996-01-16 | 1999-04-27 | Raptor Systems, Inc. | Transferring encrypted packets over a public network |
US6178505B1 (en) * | 1997-03-10 | 2001-01-23 | Internet Dynamics, Inc. | Secure delivery of information in a network |
Family Cites Families (8)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5444782A (en) * | 1993-03-09 | 1995-08-22 | Uunet Technologies, Inc. | Computer network encryption/decryption device |
US5602920A (en) * | 1995-05-31 | 1997-02-11 | Zenith Electronics Corporation | Combined DCAM and transport demultiplexer |
US6738909B1 (en) * | 1999-09-02 | 2004-05-18 | International Business Machines Corporation | Method and apparatus for automatic configuration for internet protocol security tunnels in a distributed data processing system |
CA2403736A1 (en) * | 2000-03-20 | 2001-09-27 | At&T Corp. | Service selection in a shared access network using dynamic host configuration protocol |
US7139792B1 (en) * | 2000-09-29 | 2006-11-21 | Intel Corporation | Mechanism for locking client requests to a particular server |
US20020068584A1 (en) * | 2000-12-05 | 2002-06-06 | Nortel Networks Limited | Method and system for transmitting data to a mobile device |
US7061899B2 (en) * | 2001-05-01 | 2006-06-13 | Hewlett-Packard Development Company, L.P. | Method and apparatus for providing network security |
FI20012338A0 (en) * | 2001-11-29 | 2001-11-29 | Stonesoft Corp | Firewall for filtering tunneled data packets |
-
2001
- 2001-11-29 FI FI20012338A patent/FI20012338A0/en unknown
-
2002
- 2002-11-21 DE DE60225892T patent/DE60225892T2/en not_active Expired - Lifetime
- 2002-11-21 EP EP02396174A patent/EP1317115B1/en not_active Expired - Fee Related
- 2002-11-22 US US10/301,857 patent/US7721084B2/en active Active
Patent Citations (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5898784A (en) * | 1996-01-16 | 1999-04-27 | Raptor Systems, Inc. | Transferring encrypted packets over a public network |
US6178505B1 (en) * | 1997-03-10 | 2001-01-23 | Internet Dynamics, Inc. | Secure delivery of information in a network |
Non-Patent Citations (1)
Title |
---|
MONTENEGRO G ET AL: "Sun's SKIP Firewall Traversal for Mobile IP", INTERNET CITATION, June 1998 (1998-06-01), XP002171034, Retrieved from the Internet <URL:http://www.ietf.org/rfc/rfc2356.txt> [retrieved on 20010703] * |
Also Published As
Publication number | Publication date |
---|---|
FI20012338A0 (en) | 2001-11-29 |
DE60225892D1 (en) | 2008-05-15 |
US7721084B2 (en) | 2010-05-18 |
EP1317115B1 (en) | 2008-04-02 |
DE60225892T2 (en) | 2009-05-28 |
EP1317115A2 (en) | 2003-06-04 |
US20030115328A1 (en) | 2003-06-19 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
EP1317115A3 (en) | A firewall for filtering tunneled data packets | |
WO2006073740A3 (en) | Interpreting an application message at a network element using sampling and heuristics | |
EP0581716A3 (en) | Frame relay system capable of handling both voice and data frames | |
CA2401577A1 (en) | System, device and method for rapid packet filtering and processing | |
EP1484887A3 (en) | A multi-layer based method for implementing network firewalls | |
EP1143680A3 (en) | Method of multicast data packet transmission | |
EP1304850A3 (en) | Ethernet device and method for extending ethernet fifo buffer | |
WO2005017702A3 (en) | Integrated circuit apparatus and method for high throughput signature based network applications | |
EP1206071A3 (en) | Base station, mobile terminal, and a wireless access system | |
EP1161028A3 (en) | A multicast routing method and an apparatus | |
EP1505783A3 (en) | Network apparatus, system and method for discovering path MTU in data communication network | |
EP1562334A3 (en) | Mobile communication system employing high speed downlink packet access and method for improving data processing speed in the same | |
EP2169996A3 (en) | A Technique for Compressing a Header Field in a Data Packet | |
EP1009134A3 (en) | Packet tunneling optimization to wireless devices accessing packet-based wired networks | |
CA2460530A1 (en) | Method, apparatus and computer program for the decapsulation and encapsulation of packets with multiple headers | |
EP2383953A3 (en) | Method and system for compressing and decompressing packet headers | |
EP1221798A3 (en) | Packet processing method and engine | |
EP1134933A3 (en) | System and method for multicasting | |
EP0993152A3 (en) | Switching device with multistage queuing scheme | |
EP1054568A3 (en) | Method and apparatus for providing a virtual SS7 link in a commmunications system | |
EP1345363A3 (en) | Scalable packet filter for a network device | |
EP1009132A3 (en) | Variable length packet communication device | |
WO2004072763A3 (en) | Method of multiplexing compressed and uncompressed internet protocol packets | |
AU2003219488A1 (en) | Method and apparatus for efficient transmission of voip traffic | |
EP1819111A8 (en) | Boolean protocol filtering |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PUAI | Public reference made under article 153(3) epc to a published international application that has entered the european phase |
Free format text: ORIGINAL CODE: 0009012 |
|
AK | Designated contracting states |
Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR IE IT LI LU MC NL PT SE SK TR |
|
AX | Request for extension of the european patent |
Extension state: AL LT LV MK RO SI |
|
PUAL | Search report despatched |
Free format text: ORIGINAL CODE: 0009013 |
|
AK | Designated contracting states |
Kind code of ref document: A3 Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR IE IT LI LU MC NL PT SE SK TR |
|
AX | Request for extension of the european patent |
Extension state: AL LT LV MK RO SI |
|
17P | Request for examination filed |
Effective date: 20070511 |
|
GRAP | Despatch of communication of intention to grant a patent |
Free format text: ORIGINAL CODE: EPIDOSNIGR1 |
|
GRAS | Grant fee paid |
Free format text: ORIGINAL CODE: EPIDOSNIGR3 |
|
AKX | Designation fees paid |
Designated state(s): DE FR GB |
|
GRAA | (expected) grant |
Free format text: ORIGINAL CODE: 0009210 |
|
AK | Designated contracting states |
Kind code of ref document: B1 Designated state(s): DE FR GB |
|
REG | Reference to a national code |
Ref country code: GB Ref legal event code: FG4D |
|
REF | Corresponds to: |
Ref document number: 60225892 Country of ref document: DE Date of ref document: 20080515 Kind code of ref document: P |
|
ET | Fr: translation filed | ||
PLBE | No opposition filed within time limit |
Free format text: ORIGINAL CODE: 0009261 |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT |
|
26N | No opposition filed |
Effective date: 20090106 |
|
REG | Reference to a national code |
Ref country code: FR Ref legal event code: PLFP Year of fee payment: 14 |
|
REG | Reference to a national code |
Ref country code: FR Ref legal event code: PLFP Year of fee payment: 15 |
|
PGFP | Annual fee paid to national office [announced via postgrant information from national office to epo] |
Ref country code: GB Payment date: 20161116 Year of fee payment: 15 Ref country code: DE Payment date: 20161116 Year of fee payment: 15 Ref country code: FR Payment date: 20161014 Year of fee payment: 15 |
|
REG | Reference to a national code |
Ref country code: DE Ref legal event code: R119 Ref document number: 60225892 Country of ref document: DE |
|
GBPC | Gb: european patent ceased through non-payment of renewal fee |
Effective date: 20171121 |
|
REG | Reference to a national code |
Ref country code: FR Ref legal event code: ST Effective date: 20180731 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: DE Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20180602 Ref country code: FR Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20171130 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: GB Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20171121 |